CVE-2025-12784 Certain HP LaserJet Pro Printers – Potential Information Disclosure
Attackers can expose credentials by altering scan destinations or LDAP settings on HP LaserJet Pro printers, risking account takeover.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-12784?
CVE-2025-12784 is a medium-severity vulnerability in HP Color LaserJet MFP M478-M479 series, published on 13 Nov 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
Weakness: CWE-200
Which versions are affected by CVE-2025-12784?
It affects 62 products.
Products include Hp 7kw48a Firmware, Hp 7kw49a Firmware, Hp 7kw50a Firmware, Hp 7kw51a Firmware, Hp 7kw54a Firmware, Hp 7kw55a Firmware and 56 more.
How do I fix CVE-2025-12784?
No fix has been published for CVE-2025-12784 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-12784 being exploited?
There is no known exploitation of CVE-2025-12784 in the wild and no public exploit code.
Other vulnerabilities in HP Color LaserJet MFP M478-M479 series
Sources
Also known as GHSA-2886-9536-rhhj.